Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/V1nso37QfgDRzfG2vKgxgdrW1O8.roa
File: V1nso37QfgDRzfG2vKgxgdrW1O8.roa (raw, json)
Hash identifier: OjHKUXTPh8ffZPiyQMeoZf4VCJM16DwveP0QMOp40FQ=
Subject key identifier: 57:59:EC:A3:7E:D0:7E:00:D1:CD:F1:B6:BC:A8:31:81:DA:D6:D4:EF
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0277
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/V1nso37QfgDRzfG2vKgxgdrW1O8.roa
Signing time: Mon 29 May 2023 17:53:15 +0000
ROA not before: Mon 29 May 2023 17:53:15 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 34549
IP address blocks: 123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 29 17:53:15 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=5759ECA37ED07E00D1CDF1B6BCA83181DAD6D4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:42:2a:f4:e6:c3:a0:33:45:d4:cc:dc:7a:
7c:80:60:53:29:1b:8b:78:8c:bf:67:18:1c:dc:f1:
0c:9a:8a:dd:b2:8d:dc:3b:14:00:a3:a1:50:43:01:
aa:a0:13:21:9c:0a:42:58:41:e5:18:8f:b2:a4:a5:
26:38:b3:a5:45:39:52:46:21:75:79:73:28:98:18:
8a:b9:e3:08:3b:ad:73:47:4f:3c:5a:09:f8:52:e5:
08:9e:5d:31:0f:c5:2f:2e:22:fc:38:7b:5c:0d:94:
5c:86:bd:a5:9f:f2:59:e1:15:e5:0d:aa:e0:e9:a1:
9a:07:d0:63:7f:b0:44:3c:34:51:e2:97:50:ba:46:
2f:6c:74:9d:18:c5:14:30:29:ce:9a:27:4f:ff:a6:
be:e0:ae:50:19:44:ff:fe:75:bc:48:9b:9e:2c:62:
71:a2:4d:08:64:11:7a:ea:dd:05:cf:06:85:77:91:
2f:7d:3f:86:bb:d5:ec:0d:a4:26:e4:66:24:0e:ce:
34:b8:e5:d0:0d:3a:f8:d4:d3:2a:4a:49:89:88:77:
55:32:fc:83:b0:8e:2b:15:04:33:31:71:bc:ee:b6:
a8:83:6a:68:4f:2c:db:0f:c2:c4:7b:db:1c:66:87:
5d:db:ba:d0:64:12:e8:0c:14:85:3d:1b:25:14:cc:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:59:EC:A3:7E:D0:7E:00:D1:CD:F1:B6:BC:A8:31:81:DA:D6:D4:EF
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/V1nso37QfgDRzfG2vKgxgdrW1O8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.80.0/22
123.98.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:a0:e4:56:dd:97:5a:76:46:20:c3:28:d8:38:0a:66:eb:4e:
27:b9:f8:99:8b:d0:67:d8:a7:b3:67:6d:d8:93:d6:40:84:a1:
00:26:e0:6d:3a:ec:7e:6e:7d:7f:88:f9:92:b2:a9:69:ce:d8:
4e:fc:c9:a4:53:7d:bb:39:d6:f8:f5:11:ac:f9:62:35:a2:da:
83:52:3f:36:11:3b:4b:08:b0:f7:05:a4:82:8a:da:53:22:a8:
d8:2c:de:52:14:85:95:d8:3c:ea:37:09:78:b1:6a:75:7a:ca:
80:5b:f3:4d:36:f5:4f:8d:ee:46:59:15:20:b7:cd:2b:2a:d5:
e9:10:6b:ac:29:d6:d3:ae:24:36:0c:fd:bb:8d:4e:de:1d:e9:
8c:a5:be:5e:4e:71:1a:ef:33:88:78:30:c9:db:36:c8:b5:bf:
ef:6c:e8:6c:96:00:9f:9c:9d:6d:03:d7:8e:20:ca:b8:f5:f1:
eb:5a:0a:60:c1:21:9c:55:8f:82:bf:22:6c:a7:8a:e3:a4:77:
8a:3a:50:b5:a6:a2:d6:7d:ea:b3:ff:82:d3:45:d2:90:fa:dc:
3e:f0:11:0f:88:33:df:1d:3c:35:7d:d0:3e:ea:91:a9:ff:77:
df:74:0c:f9:a9:7e:19:9b:e5:31:40:de:5f:aa:c1:01:8e:6c:
e6:ba:58:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org